Anaconda has a product specific password policies support now

Paul W. Frields stickster at gmail.com
Mon Mar 30 21:19:17 UTC 2015


On Tue, Mar 24, 2015 at 09:36:21AM -0400, Paul W. Frields wrote:
> On Mon, Mar 23, 2015 at 03:38:14PM -0400, Stephen Gallagher wrote:
> > On Mon, 2015-03-23 at 15:17 -0400, Paul W. Frields wrote:
> > > On Mon, Mar 23, 2015 at 05:54:34AM -0400, Jaroslav Reznik wrote:
> > > > Hi,
> > > > as this was hot topic on the lists and it's FESCo blocker, so in
> > > > case you missed it (as it's very new), it's now possible to create
> > > > product specific password policies in Anaconda!
> > > > 
> > > > For details, check out 
> > > > https://bugzilla.redhat.com/show_bug.cgi?id=1191842#c14
> > > > 
> > > > Thanks bcl!
> > > 
> > > Indeed.  This looks like something we need to include in our
> > > -productimg package.  (Is that still being used for F22?)
> > > 
> > 
> > Yes, the fedora-productimg-* packages are still in use, though they 
> > are slightly different now. They include the per-product theming used 
> > for Anaconda as well as things like default filesystem, default 
> > package environment group set, etc.
> > 
> > This *is* probably where the pwpolicy stuff belongs.
> 
> OK, so it looks like action items are:
> 
> (1) Provide a new /etc/security/pwquality.conf in the productimg
> 
> (2) Update our workstation KS file with %anaconda section as per
> instructions here:
>     https://github.com/rhinstaller/anaconda/commit/e7e86a23d56bde2b2493d17c99b0781508435993
> 
> Did I miss anything?

Do we just need something like this to be in line with defaults?

-- 
Paul W. Frields                                http://paul.frields.org/
  gpg fingerprint: 3DA6 A0AC 6D58 FEC4 0233  5906 ACDB C937 BD11 3717
  http://redhat.com/   -  -  -  -   http://pfrields.fedorapeople.org/
    The open source story continues to grow: http://opensource.com

-------------- next part --------------
diff --git a/fedora-live-workstation.ks b/fedora-live-workstation.ks
index 9038413..dcc77b1 100644
--- a/fedora-live-workstation.ks
+++ b/fedora-live-workstation.ks
@@ -7,6 +7,10 @@
 
 part / --size 6144 
 
+# Get equivalent pwquality settings to default
+%anaconda
+pwpolicy root --nostrict --minlen=9 --minquality=1 --nochanges --emptyok
+
 %post
 
 # This is a huge file and things work ok without it


More information about the desktop mailing list